PT-2022-16000 · Unknown · Toast Ui Grid

Bananabr + 5 · Published 2022-09-22 · Updated 2022-09-24 · CVE-2022-23458

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Toast UI Grid versions prior to 4.21.3

Description The issue concerns cross-site scripting attacks that can occur when pasting specially crafted content into editable cells. This can be exploited by attackers to execute malicious scripts.

Recommendations For versions prior to 4.21.3, update to version 4.21.3 to resolve the issue. At the moment, there are no known workarounds for this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-23458

GHSA-9RWJ-9J2H-FHVM

Affected Products

Toast Ui Grid

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23458.json · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2022-029_nhn_tui_grid · Exploit
• https://github.com/nhn/tui.grid/commit/e9db5968675ae113c07efc091cce210f2b26854f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-23458 · Security Note
• https://osv.dev/vulnerability/GHSA-9rwj-9j2h-fhvm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23458 · Vendor Advisory
• https://github.com/nhn/tui.grid · Note
• https://t.me/cvenotify/36733 · Telegram Post
• https://t.me/cvenotify/36778 · Telegram Post